Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: BU2DZ9Kbte27zEcs5fbrqPyvDvvPoo9y+T6RE3DKM3U=
Subject key identifier: 06:A7:58:4B:9E:1B:A3:01:C5:4C:4B:00:5E:41:C1:7C:58:87:B7:A7
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 019678316D6E0BC5E341F599C603466B70C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 0181
Signing time: Sun 27 Apr 2025 17:00:27 +0000
Manifest this update: Sun 27 Apr 2025 17:00:27 +0000
Manifest next update: Mon 28 Apr 2025 17:00:27 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: oQ6jSz1o4qkmvOxi39+JOv2ovyaBHzDJkncaBvwidrU=)
2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:6d:6e:0b:c5:e3:41:f5:99:c6:03:46:6b:70:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Apr 27 17:00:27 2025 GMT
Not After : Apr 28 17:00:27 2025 GMT
Subject: CN=06a7584b9e1ba301c54c4b005e41c17c5887b7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:7d:76:5e:d1:9b:0e:2c:92:07:6e:1b:9c:
66:92:02:03:4b:64:03:00:39:a7:d3:e5:cf:55:ff:
f1:cd:25:81:36:07:9a:04:24:7e:62:6b:d2:6b:46:
ac:eb:f2:49:d0:89:82:3c:f4:34:d5:46:c5:dc:0c:
d8:04:b8:c2:7e:e8:6f:5e:d4:87:f8:7c:97:a5:3a:
c5:15:cd:49:83:ed:9e:3f:1b:58:83:33:5b:19:79:
e3:dd:10:2d:a3:64:ff:26:a4:00:33:46:29:63:7f:
cc:24:1b:88:60:29:5c:5a:a4:f6:62:4c:6a:08:e3:
3a:a7:51:ca:5f:c8:3b:84:ca:11:8c:a8:b1:fc:2a:
0c:79:f5:1d:f0:2e:cf:a8:3a:fe:fc:ff:95:00:f7:
5a:6e:ce:f6:e0:c9:5f:0d:8b:b4:66:78:ae:36:79:
48:4a:70:6a:1f:50:27:18:f3:72:70:c0:ec:a4:bc:
f1:2a:cf:00:35:ef:0d:6a:cb:c3:63:8b:33:c4:02:
46:07:0b:c3:9c:20:dd:78:a2:8b:12:87:99:db:87:
0a:0f:8f:50:6b:44:72:96:62:5d:a4:8b:93:d4:2a:
68:17:ed:c7:10:db:a1:00:fb:68:2b:9d:93:cb:71:
8a:cc:5a:a0:8f:90:b4:7e:e2:08:4b:70:9c:83:a9:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:58:4B:9E:1B:A3:01:C5:4C:4B:00:5E:41:C1:7C:58:87:B7:A7
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:66:41:2b:55:8f:34:81:8a:94:88:ef:af:0b:fa:a3:3e:99:
32:5f:87:db:68:cf:b6:66:8f:4d:4c:4b:40:c4:79:27:c5:2e:
70:66:af:b4:27:8d:fa:ad:59:31:2c:e2:16:66:b3:33:91:2d:
cb:d3:c0:c1:d4:da:f7:41:c9:7e:1e:1c:6e:7d:14:2b:b0:3f:
93:a8:ab:8a:91:40:3c:b9:0b:83:8a:fb:ce:3b:32:a5:20:a8:
2b:a2:60:3c:16:1f:ea:5e:bb:e9:05:c9:c4:5f:3e:ea:29:da:
c0:cc:16:64:ba:52:35:44:69:49:7a:33:73:4c:62:ad:ce:dd:
c5:09:bf:8c:fa:59:bb:fd:78:82:82:7a:39:e2:2e:09:fa:6e:
09:28:74:db:84:19:2f:30:78:08:0f:e0:3b:c9:37:73:9c:6f:
46:76:55:ca:6d:10:31:aa:50:03:20:f2:15:91:59:58:59:73:
a2:7a:9d:4b:91:5a:d5:85:e1:60:7e:bd:b6:f2:43:3c:0f:26:
53:4f:2f:b0:9d:e3:c2:d0:cc:93:e9:0a:53:77:bb:a8:b4:fc:
42:8a:c3:41:4c:d6:a1:f6:23:32:de:f8:a9:63:cf:11:de:3d:
c2:bd:3e:20:c8:2b:73:a8:5c:44:db:82:f4:c0:82:be:13:19:
f5:d4:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:30 2025 by rpki-client